topic Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other in SASE and Remote Access

VPN Clientless RDP - Guacamole freeRDP Webconnect or other

NorthernNetGuy — Wed, 18 Mar 2020 19:48:39 GMT

With the surge of getting people to work from home, we're trying to get a strong solution in place.

I've quickly set up a freeRDP Webconnect service available through our sslvpn web portal. I'm finding it to be a bit unstable and requiring about 1-2 reboots a day.

I'm wondering if Guacamole or another app might be something that suits as, and wanted to see what others are using.

Our basic requirement is to have users be able to use the portal just like a regular RDP session. Enter in the host name and their credentials (SSO might be fine), and connect. I'm unsure if I can get this kind of flexibility in Guacamole, as it looks like I have to define each host manually. Not sure what other RDS items I should be considering.

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

PhoneBoy — Wed, 18 Mar 2020 23:40:06 GMT

You might want to see what @Shay_Levin used in his video: https://community.checkpoint.com/t5/How-To-Videos/Mobile-Access-Blade-RDP-access-Step-by-Step/m-p/78100#M183

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

Shay_Levin — Thu, 19 Mar 2020 07:15:40 GMT

Hi,

Guacamole is mature, stable and free but requires an investment in learning.

If you want a product with support that works great and can be published easily with MAB - Web application, try https://www.ericom.com/access-now/html5-rdp-client/ (but isn't free )

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

NorthernNetGuy — Thu, 19 Mar 2020 11:49:54 GMT

I actually followed that video for setting up the same application, the freeRDP Webconnect, however i've foudn that utility to be unstable, needing to restart the services multiple times a day, which ahs lead me to where I am now, looking for a better alternative

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

NorthernNetGuy — Thu, 19 Mar 2020 11:50:56 GMT

Hi Shay, first of all the step by step video you have is excellent. I'll take a look at this utility you've suggested

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

StefanBauer — Sat, 21 Mar 2020 16:07:30 GMT

Hello,

we also want to use the mobile access blade for the "Guacamole" access. Unfortunately does Guacamole (version 1.1) work internal fine. From external with the mobile access we can logon, but we cannot open settings and sessions.

Do you have any idea what the reason is?

We have Check Point version R.80.30 running.

Thanks in advance.

Stefan

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

PhoneBoy — Sun, 22 Mar 2020 00:12:07 GMT

As with any "reverse proxy" of this nature, there's a fair bit of link/Javascript rewriting going on.
Looks like some changes may be required on our end to support Guacamole.
Refer to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk134075

Re: VPN Clientless RDP - Guacamole freeRDP Webconnect or other

StefanBauer — Sun, 22 Mar 2020 06:41:17 GMT

Current we use as link translation "path translation" (PT). Has anyone experience with "hostname translation"?
It might be the better solution. I take that from the "Mobile Access Administration Guide".

We also tried:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk134075

It doesn' t really change something...